I have a simple switch, with a newer firewall, Firewalla, with only one port that handles egress and ingress.. it connects to an isp in bridge mode connected to the same switch, and that firewall is running dhcp.
All is working with one vlan, but I want to protect the bridge from receiving the dhcp request from peers other than the firewall. I can’t use two untagged vlans on net gear, so how do I protect the Internet modem from dhcp requests from peers other than the one firewall, in the event of the recovery boot during a power outage? That interface found 4 macs upstream of itself to the bridged modem and network upstream, and I have the max of the firewall.
What’s the smartest cleanest way to do this, which is healthy in the event isp changes hardware?
